Microsoft Releases Fix for Zero-Day Flaw in July 2022 Security Patch Rollout

Microsoft released its month to month spherical of Patch Tuesday updates to address 84 new security flaws spanning many solution categories, counting a zero-working day vulnerability that is below energetic attack in the wild.

Of the 84 shortcomings, four are rated Critical, and 80 are rated Significant in severity. Also independently fixed by the tech huge are two other bugs in the Chromium-based mostly Edge browser, 1 of which plugs a further zero-working day flaw that Google disclosed as being actively exploited in real-planet attacks.

Best of the checklist of this month’s updates is CVE-2022-22047 (CVSS score: 7.8), a situation of privilege escalation in the Windows Client Server Runtime Subsystem (CSRSS) that could be abused by an attacker to attain Procedure permissions.

“With this stage of obtain, the attackers are able to disable community expert services this kind of as Endpoint Detection and Security resources,” Kev Breen, director of cyber threat study at Immersive Labs, advised The Hacker Information. “With Process obtain they can also deploy equipment like Mimikatz which can be used to get well even a lot more admin and domain level accounts, spreading the menace swiftly.”

Extremely tiny is known about the character and scale of the attacks other than an “Exploitation Detected” assessment from Microsoft. The company’s Danger Intelligence Middle (MSTIC) and Security Response Heart (MSRC) have been credited with reporting the flaw.

Apart from CVE-2022-22047, two additional elevation of privilege flaws have been fastened in the very same element — CVE-2022-22026 (CVSS score: 8.8) and CVE-2022-22049 (CVSS score: 7.8) — that have been claimed by Google Project Zero researcher Sergei Glazunov.

“A locally authenticated attacker could deliver specially crafted facts to the community CSRSS service to elevate their privileges from AppContainer to Program,” Microsoft reported in an advisory for CVE-2022-22026.

“Because the AppContainer natural environment is thought of a defensible security boundary, any process that is equipped to bypass the boundary is thought of a improve in Scope. The attacker could then execute code or access sources at a greater integrity level than that of the AppContainer execution atmosphere.”

Also remediated by Microsoft involve a range of distant code execution bugs in Windows Network File System (CVE-2022-22029 and CVE-2022-22039), Windows Graphics (CVE-2022-30221), Remote Technique Connect with Runtime (CVE-2022-22038), and Windows Shell (CVE-2022-30222).

The update more stands out for patching as a lot of as 32 issues in the Azure Web-site Restoration catastrophe recovery service. Two of these flaws are associated to distant code execution and the remaining 30 worry privilege escalation.

“Productive exploitation […] demands an attacker to compromise admin credentials to one of the VMs linked with the configuration server,” the corporation said, including the flaws do not “allow disclosure of any confidential info, but could allow an attacker to modify knowledge that could consequence in the assistance remaining unavailable.”

On major of that, Microsoft’s July update also contains fixes for four privilege escalation vulnerabilities in the Windows Print Spooler module (CVE-2022-22022, CVE-2022-22041, CVE-2022-30206, and CVE-2022-30226) just after a brief respite in June 2022, underscoring what seems to be a hardly ever-ending stream of flaws plaguing the technology.

Rounding off the Patch Tuesday updates are two noteworthy fixes for tampering vulnerabilities in the Windows Server Assistance (CVE-2022-30216) and Microsoft Defender for Endpoint (CVE-2022-33637) and a few denial-of-provider (DoS) flaws in Internet Information and facts Solutions (CVE-2022-22025 and CVE-2022-22040) and Security Account Supervisor (CVE-2022-30208).

Software package Patches from Other Distributors

In addition to Microsoft, security updates have also been launched by other sellers since the start off of the thirty day period to rectify various vulnerabilities, like —

• Adobe
• AMD
• Android
• Apache Tasks
• Cisco
• Citrix
• Dell
• Fortinet
• GitLab
• Google Chrome
• HP
• Intel
• Lenovo
• Linux distributions Debian, Oracle Linux, Pink Hat, SUSE, and Ubuntu
• MediaTek
• Qualcomm
• SAP
• Schneider Electric powered
• Siemens, and
• VMware

Uncovered this short article fascinating? Observe THN on Fb, Twitter  and LinkedIn to read extra unique written content we write-up.

Some elements of this report are sourced from:
thehackernews.com